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Claims 



What is claimed is: 
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A method for tracing a traffic event utilizing a firewall, comprising: 
executing a firewall on a local computer; 

monitoring traffic events between the local computer and a remote computer 
over a network utilizing the firewall; 
^displaying the traffic events utilizing the firewall; 

acing at least one of the traffic events utilizing the firewall; and 
displaying a map of the trace utilizing the firewall. 



an event log> 

The method as recited in claim 2, wherein the event log identifies a time and 
an Internet Protocol (IP) address associated with the traffic events. 

The method as recited in claim 2, wherein the traffic events are organized 
based on times the traffic events are logged. 

The method as recited in claim 2, wherein the traffic events include attempts 
to access the local computer. 

The method as recited in claim 1 , wherein th\at least one traffic event is 
traced in response to a user request. 

The method as recited in claim 1, wherein the tracingincludes identifying a 
plurality of network segments traversed by the traffic event. 
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The method as recited in claim 7, wherein the map includes the network 
segments. 

e method as recited in claim 8, and further comprising displaying a 
plurality of views of the map. 




1 10. The method as recited in claim 9, wherein a geographical location of the 

2 network segments is displayed upon the selection of a first one of the views. 

1 11. The method aSvrecited in claim 10, wherein nodes of the network segments 

2 are displayed upon the selection of a second one of the views. 

1 12. The method as recited in claim 1 1 , wherein a list of the network segments are 

2 displayed upon the selection of a third one of the views. 

1 13. A computer program producl^for tracing a traffic event utilizing a firewall, 

2 comprising: 

3 (a) computer code for executing a firWall on a local computer; 

4 (b) computer code for monitoring traffic events between the local computer and 

5 a remote computer over a network utilizing the firewall; 

6 (c) computer code for displaying the traffic Events utilizing the firewall; 

7 (d) computer code for tracing at least one of ttt^ traffic events utilizing the 

8 firewall; and 

9 (e) computer code for displaying a map of the track utilizing the firewall. 



1 14. The computer program product as recited in claim K3, wherein the traffic 

2 events are displayed in an event log. 



1 15. The computer program product as recited in claim 14, wnterein the event log 

2 identifies a time and an Internet Protocol (IP) address associated with the 

3 traffic events. 
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1 1 6.\ The computer program product as recited in claim 14, wherein the traffic 

2 \ events are organized based on times the traffic events are logged. 

1 17. T^he computer program product as recited in claim 14, wherein the traffic 

2 events include attempts to access the local computer. 

1 18. The computer program product as recited in claim 13, wherein the at least 

2 one traffic event is traced in response to a user request. 
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1 19. The computer program product as recited in claim 1 3, wherein the tracing 

2 includes identifying a plurality of network segments traversed by the traffic 

3 event. 

1 20. The computer program product as recited in claim 1 9, wherein the map 

2 includes the network segments. 
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1 21 . The computer program product as recited in claim 20, and further comprising 

2 computer code for displaying^ plurality of views of the map. 

1 22. The computer program product asVecited in claim 2 1 , wherein a 

2 geographical location of the networlc\segments is displayed upon the 

3 selection of a first one of the views. 



1 23. The computer program product as recited in claim 22, wherein nodes of the 

2 network segments are displayed upon the selection of a second one of the 

3 views. 



1 24. The computer program product as recited in claim z3, wherein a list of the 

2 network segments are displayed upon the selection ora third one of the 

3 views. \ 
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A system for tracing a traffic event utilizing a firewall, comprising: 
logic for executing a firewall on a local computer; 

logic for monitoring traffic events between the local computer and a remote 
J 4 \ computer over a network utilizing the firewall; 

\ logic for displaying the traffic events utilizing the firewall; 

logic for tracing at least one of the traffic events utilizing the firewall; and 
log*ic for displaying a map of the trace utilizing the firewall. 

A method for tracing a traffic event utilizing a firewall, comprising: 
executing, a firewall on a local computer; 

monitoring\traffic events between the local computer and a remote computer 
over a network utilizing the firewall; 
displaying the traffic events utilizing the firewall; 
tracing at least onk of the traffic events utilizing the firewall; 
displaying a geographical location of a plurality of network segments 
associated with the traffic event upon the selection of a first one of a plurality 
of views utilizing the firewall; 

displaying a plurality of nVles of the network segments upon the selection of 
a second one of the views utilizing the firewall; and 

displaying a list of the network segments upon the selection of a third one of 
the views utilizing the firewall. 

A method for tracing a traffic eventWilizing a firewall, comprising: 
executing a firewall on a local computer; 

monitoring traffic events between the lqpal computer and a remote computer 
over a network utilizing the firewall; 

logging the traffic events in an event log utilizing the firewall, wherein the 
event log identifies a time and an Internet Protocol (IP) address associated 
with the traffic events; 
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(d) organizing the traffic events in the event log based on times the traffic events 
\. are logged utilizing the firewall; 

(e) displaying the traffic events in the event log utilizing the firewall; 

(f) detecting the selection of one of the traffic event by a user; 

(g) tracing at reast one of the traffic events utilizing the firewall upon the 
selection therebt wherein the tracing identifies a plurality of network 
segments traverseahy the traffic event; 

(h) detecting the selection o£one of a plurality of views by the user; and 

(i) displaying the network segments in the selected view upon the selection of 
one of the views. 
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